CVE-2020-18282

概要

参考情報

• nangge/noneCms · Product
• nangge/noneCms · Exploit

nonecms のその他の脆弱性

• CVE-2020-18647高 7.5Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor".
• CVE-2020-18646高 7.5Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".
• CVE-2020-23376中 6.1NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be inj…
• CVE-2020-23374中 5.4Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitra…
• CVE-2020-23373中 5.4Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary w…